Wireshark-users: Re: [Wireshark-users] Using mate to filter a h248 transaction

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: jehanzeb.khan@xxxxxxxxx
Date: Sun, 2 Nov 2008 23:42:54 -0800 (PST)
Hello Emre
 Would it be possible for you to share the pcap file?
 
Regards
Jehanzeb

From: Emre UZUNCA <euzunca@xxxxxxxxx>
To: wireshark users <Wireshark-users@xxxxxxxxxxxxx>
Sent: Friday, October 31, 2008 8:17:38 PM
Subject: [Wireshark-users] Using mate to filter a h248 transaction

Hello,
 
I would like to filter related bicc and h248 messages using MATE. I think to filter the related h248 AddRequest and AddReply messages (when the Context ID is wildcarded), transaction ID should be used. Therefore for the Gop, I would like to specify a condition that will be fulfilled if either the transaction ID or the Context ID is equal. I thought loose match can work, but was unable to find the correct format. Does any one know how to do this?
 
regards,
Emre Uzunca